Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8457ea6c-190f-3a3b-9c3b-77be657bfa5f.roa
File: 8457ea6c-190f-3a3b-9c3b-77be657bfa5f.roa (raw, json)
Hash identifier: MYm2BLKbo6imhmijvIoBHPNdpElHQwk12/6n+KNpjS8=
Subject key identifier: A3:D2:8C:C6:BF:27:6B:F9:60:47:9B:8A:9E:B8:A1:BE:9B:3F:95:6E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848960B69FA0C794BC63AD75600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8457ea6c-190f-3a3b-9c3b-77be657bfa5f.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 36630
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:69:fa:0c:79:4b:c6:3a:d7:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=16d97106-e654-4014-9e71-dc918d95acdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:e2:1c:d6:2a:a2:e9:37:28:b4:53:89:d9:
ab:e0:2b:b7:59:9a:16:1d:54:9f:e9:92:a5:4c:5b:
1b:4b:2e:d0:c5:b9:de:7e:28:b4:1d:66:9b:7c:a3:
46:58:26:b7:1e:4d:29:66:97:a3:bc:57:12:48:a3:
16:ef:37:8f:4a:5e:72:ee:ce:9b:52:7c:ea:da:d8:
91:be:9a:a6:7f:5a:63:0d:de:0b:65:63:b5:72:f8:
0f:07:67:25:ae:b5:e9:6f:94:eb:e8:64:b8:dd:64:
6b:d9:74:b3:80:72:22:c7:e7:f6:b1:61:9f:1c:8f:
b0:93:08:b9:ce:38:36:f0:d7:cf:64:a3:70:d3:50:
de:2a:c3:63:ff:8e:1f:16:d8:70:e6:dc:e2:d3:71:
88:d4:1e:d6:4a:06:ed:b6:19:f3:ae:8d:a4:7c:18:
b2:6d:de:1b:6b:e9:b5:1a:26:5f:4c:b8:61:84:60:
f1:6b:26:db:09:0d:a8:30:12:4c:92:e0:03:72:ff:
37:4c:bc:30:8a:be:8c:94:b7:ab:2a:bd:d7:26:6e:
42:5e:fc:92:ac:9c:82:36:69:96:18:1b:1f:9f:fa:
45:5f:05:cc:28:24:91:a1:2e:df:d3:31:1c:0d:3c:
da:e7:6b:3b:a7:40:80:de:92:12:c8:10:78:48:9c:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D2:8C:C6:BF:27:6B:F9:60:47:9B:8A:9E:B8:A1:BE:9B:3F:95:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8457ea6c-190f-3a3b-9c3b-77be657bfa5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d3:8c:b5:0a:42:84:95:12:92:bd:25:5f:ba:6e:59:25:af:
51:de:91:13:53:9b:da:78:fa:ba:64:a6:ca:d0:74:91:c0:3d:
3d:99:02:8b:b5:45:b6:fe:46:c7:24:87:32:df:63:fe:88:a0:
f6:9e:2c:58:d6:68:a2:5d:09:7c:17:f1:1c:d3:36:e0:9d:f3:
c9:d1:32:66:e4:28:ce:32:c5:b6:7a:7b:7b:72:44:54:86:77:
9b:f1:12:bb:f1:ce:e1:84:7e:31:60:c5:21:3a:4e:e9:2b:d5:
70:90:63:bf:95:76:bd:ec:eb:a6:6b:92:2a:99:31:d1:14:c2:
cd:b4:51:e2:a0:bb:cf:8d:8c:6b:a0:d1:db:e6:a1:79:ad:41:
30:85:2f:a4:05:9c:98:eb:0c:ea:6d:fb:af:17:60:0e:6b:02:
88:10:59:34:b4:3d:5e:23:fa:d5:66:32:95:86:26:b0:06:dd:
89:c6:22:6d:73:63:db:7c:b5:6a:f7:38:82:2f:53:b9:23:68:
22:6b:16:f6:15:70:87:74:bc:1b:78:d0:59:77:01:73:97:6d:
76:b3:fb:21:4d:44:98:c7:76:bd:b0:8b:f5:f9:79:66:df:fc:
66:56:7a:e9:8e:b4:0a:27:35:ae:fa:24:90:e9:42:8a:5f:f9:
9a:6c:ae:80
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiWC2n6DHlLxjrXVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
MTZkOTcxMDYtZTY1NC00MDE0LTllNzEtZGM5MThkOTVhY2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/viHNYqouk3KLRTidmr4Cu3WZoWHVSf6ZKl
TFsbSy7Qxbnefii0HWabfKNGWCa3Hk0pZpejvFcSSKMW7zePSl5y7s6bUnzq2tiR
vpqmf1pjDd4LZWO1cvgPB2clrrXpb5Tr6GS43WRr2XSzgHIix+f2sWGfHI+wkwi5
zjg28NfPZKNw01DeKsNj/44fFthw5tzi03GI1B7WSgbtthnzro2kfBiybd4ba+m1
GiZfTLhhhGDxaybbCQ2oMBJMkuADcv83TLwwir6MlLerKr3XJm5CXvySrJyCNmmW
GBsfn/pFXwXMKCSRoS7f0zEcDTza52s7p0CA3pISyBB4SJx1PwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKPSjMa/J2v5YEebip64ob6bP5VuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODQ1N2VhNmMtMTkwZi0z
YTNiLTljM2ItNzdiZTY1N2JmYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBn04y1CkKElRKSvSVfum5ZJa9R3pETU5vaePq6
ZKbK0HSRwD09mQKLtUW2/kbHJIcy32P+iKD2nixY1miiXQl8F/Ec0zbgnfPJ0TJm
5CjOMsW2ent7ckRUhneb8RK78c7hhH4xYMUhOk7pK9VwkGO/lXa97Ouma5IqmTHR
FMLNtFHioLvPjYxroNHb5qF5rUEwhS+kBZyY6wzqbfuvF2AOawKIEFk0tD1eI/rV
ZjKVhiawBt2JxiJtc2PbfLVq9ziCL1O5I2giaxb2FXCHdLwbeNBZdwFzl212s/sh
TUSYx3a9sIv1+Xlm3/xmVnrpjrQKJzWu+iSQ6UKKX/mabK6A
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:43:46 2025 by rpki-client